NIST SP 800-53 rev5 · Identification and Authentication
IA-11 Re-authentication
Mitigates 7 ATT&CK techniques, used by 5 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Techniques it mitigates
- T1110Brute Force23 users
- T1110.003Brute Force: Password Spraying16 users
- T1110.001Brute Force: Password Guessing13 users
- T1110.002Brute Force: Password Cracking5 users
- T1110.004Brute Force: Credential Stuffing3 users
- T1556.006Modify Authentication Process: Multi-Factor Authentication3 users
- T1556.007Modify Authentication Process: Hybrid Identity2 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.